Home • Hashes • Research • About • Swag Shop

System currently contains 111,146,017 malware samples.

Report for a sample recently added to the system:

3904910c3bd1682e350d655d26c440cd6b728736f49ed91848b3cc0187636bcf
VirusShare info last updated 2026-03-25 00:00:00 UTC
MD5	3d495d801434ed9a9a39167562ac60ae
SHA1	c56fda1f5a50df5bb15518425d1e34d883171a51
SHA256	3904910c3bd1682e350d655d26c440cd6b728736f49ed91848b3cc0187636bcf
SSDeep	24576:WEzffPi1dJU43I98U7nYYJ2tHhADSANLHgZpJEMLtBE7AR:T/4MnYYJ2ZhqSGLHkJEMxBEkR
Authentihash	b90bf23a7bb5b2ec389a4a9a0b1b14c1060dcb9666fc994470aac53f0784d431
Size	1,671,205 bytes
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Mime Type	application/x-dosexec
Extension	exe
TrID	NSIS - Nullsoft Scriptable Install System (75.8%) Windows ActiveX control (10.4%) Windows Control Panel Item (generic) (5.1%) Win32 Executable MS Visual C++ (generic) (2.7%) Microsoft Visual C++ compiled executable (generic) (1.4%)
Detections (35/72)	APEX Malicious Alibaba Trojan:Win32/Cerbu.dc7303b6 Antiy-AVL Trojan/Win32.VB Bkav W32.AIDetectMalware CAT-QuickHeal Trojan.Ghanarava.1774338155ac60ae CTX exe.trojan.generic ClamAV Win.Worm.Mabezat-5431 CrowdStrike win/malicious_confidence_90% (W) Cylance Unsafe Cynet Malicious (score: 100) DeepInstinct MALICIOUS Elastic malicious (high confidence) Fortinet W32/Ipamor.CD05!tr GData Win32.Trojan.Agent.JY79DH Google Detected Gridinsoft Trojan.Win32.Wacatac.oa!s1 Ikarus Virus.Win32.Virut K7AntiVirus Riskware ( 0040eff71 ) K7GW Riskware ( 0040eff71 ) Kingsoft malware.kb.a.942 Lionic Trojan.Win32.Generic.4!c Malwarebytes Generic.Malware/Suspicious McAfeeD Real Protect-LS!3D495D801434 Microsoft Trojan:Win32/Wacatac.B!ml Paloalto generic.ml SUPERAntiSpyware Trojan.Agent/Gen-Dropper Sangfor Suspicious.Win32.Save.ins SentinelOne Static AI - Malicious PE Skyhigh BehavesLike.Win32.Dropper.th Sophos Mal/Generic-S Symantec ML.Attribute.HighConfidence TrellixENS GenericRXWS-UZ!3D495D801434 Varist W32/Cerbu.U.gen!Eldorado Zillya Trojan.GenericKD.Win32.204396 tehtris Generic.Malware VirusTotal Report submitted 2026-03-24 10:35:42 UTC
ExIF Data	CharacterSet Unicode CodeSize 8192 CompanyName Microsoft Corporation EntryPoint 0x1ed6 FileDescription Internet Connection Wizard FileFlags (none) FileFlagsMask 0x003f FileOS Windows NT 32-bit FileSize 1632 kB FileSubtype 0 FileType Win32 EXE FileTypeExtension exe FileVersion 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) FileVersionNumber 6.0.2900.2180 ImageFileCharacteristics No relocs, Executable, No line numbers, No symbols, 32-bit ImageVersion 5.1 InitializedDataSize 8192 InternalName INETWIZ LanguageCode English (U.S.) LegalCopyright © Microsoft Corporation. All rights reserved. LinkerVersion 7.1 MIMEType application/octet-stream MachineType Intel 386 or later, and compatibles OSVersion 5.1 ObjectFileType Executable application OriginalFileName INETWIZ.EXE PEType PE32 ProductName Microsoft® Windows® Operating System ProductVersion 6.00.2900.2180 ProductVersionNumber 6.0.2900.2180 Subsystem Windows GUI SubsystemVersion 4 TimeStamp 2004:08:04 05:59:25+00:00 UninitializedDataSize 0